Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f4769102-e7db-3909-9e16-58a8c85e95be.roa
File: f4769102-e7db-3909-9e16-58a8c85e95be.roa (raw, json)
Hash identifier: 5kMJ28WUrY79s7uyUUj8ehxJCRYJuY4xUsLYspA8+Og=
Subject key identifier: 99:27:F6:AF:54:14:62:35:59:6C:52:E5:A0:06:B5:A4:C5:68:83:D0
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C125B78F9E31D78EFBE6700
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f4769102-e7db-3909-9e16-58a8c85e95be.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33287
IP address blocks: 98.225.232.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:12:5b:78:f9:e3:1d:78:ef:be:67:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=dae17c7e-6192-4207-89ea-c7de2e1410ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:55:b0:85:ac:f5:d1:7b:6d:9b:e4:3e:22:d1:
52:69:54:42:2d:f5:f6:a7:c5:d2:c5:4e:d6:8f:96:
c9:f2:07:82:d5:c8:42:c5:73:dc:89:e6:ee:e0:ac:
dc:99:7c:4e:c8:6e:29:93:e0:e6:44:15:68:3e:13:
e5:55:08:cf:88:c2:df:a6:4f:a7:34:a5:b9:df:31:
a9:6f:47:46:46:71:55:92:f9:99:4d:b6:73:c6:e6:
58:81:3b:0a:b6:51:61:93:92:14:48:c0:e7:a4:b2:
13:38:7d:56:f4:94:03:50:a1:43:fe:48:e0:dd:b2:
92:e6:1d:fe:9e:44:5c:3f:49:5c:66:a4:0e:0a:15:
22:9a:44:35:66:7e:07:5b:0a:78:84:cc:23:38:af:
f1:c5:86:a7:ce:a5:87:48:88:3b:e3:94:62:04:95:
ca:50:91:7d:af:c8:aa:7f:e0:b7:ef:b6:59:42:96:
26:13:04:cd:22:2e:ea:da:a3:7a:d6:24:1e:32:84:
bd:94:ed:3a:11:16:3b:c6:18:0d:f5:63:92:29:70:
d1:ba:03:c9:01:a3:eb:c4:a5:61:e1:1b:d1:87:86:
c6:6e:3d:b0:8b:66:11:82:04:31:32:43:41:89:38:
e9:b7:71:2a:15:a3:4a:6b:ce:db:3b:22:d4:0c:cb:
87:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:27:F6:AF:54:14:62:35:59:6C:52:E5:A0:06:B5:A4:C5:68:83:D0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f4769102-e7db-3909-9e16-58a8c85e95be.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.225.232.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3e:57:b7:8c:55:71:9c:82:bb:8b:75:53:f5:30:fc:a2:c5:e6:
89:58:87:fc:b6:b7:8d:e7:60:92:d7:1c:ee:be:6c:4f:07:31:
7f:5e:d3:3c:0e:1b:37:18:10:35:6d:a8:be:2b:a9:e7:f7:3c:
50:93:ae:18:62:c2:29:40:b8:75:06:f4:5e:e3:67:95:38:6d:
70:0f:3f:38:c4:6d:c3:24:69:a0:6f:72:74:67:c2:9a:b8:72:
48:6a:5d:33:0b:2f:70:1c:66:dc:ea:f9:25:ea:58:33:7f:fd:
b3:4a:b3:60:6a:03:99:a9:6b:f4:6a:cd:9c:72:6a:6f:19:b1:
18:ad:d0:a5:a0:2c:63:5b:91:36:ca:ab:2d:d2:0b:c7:bd:21:
6a:e7:33:f7:7d:95:dd:43:bf:81:3c:40:4d:a3:2e:a5:bd:3c:
6a:9b:1d:16:80:42:73:d6:1b:67:34:13:a2:ab:96:7c:fe:47:
50:a7:c5:67:3e:65:8c:3f:29:12:8c:a2:7e:9b:1a:9f:50:56:
1a:77:7c:9f:88:fc:ad:71:b5:0c:4b:31:43:34:fd:c9:af:3a:
df:3a:ca:ca:52:42:f1:c1:20:40:96:3d:ee:ab:79:30:f7:66:
72:46:06:9b:6a:50:e9:b5:39:5b:72:4f:a8:b3:3d:dd:7d:5d:
77:bd:f0:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 11:59:30 2025 by rpki-client